circle-wallet

• Analyzed: May 12, 2026, 3:17 AM
• Findings: 1
• Version: 1.0.17
• Hash: 7ca6a15270fa97235b699fea5197e1e082316016ef422c2dd260c7a22c2d4f03
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Circle Wallet skill is benign. Its code and documentation clearly align with its stated purpose of managing USDC wallets via Circle Developer-Controlled Wallets. The skill's file system access is limited to its designated configuration directory (`~/.openclaw/circle-wallet/`), and network communication is exclusively with `api.circle.com` via the official Circle SDK. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in the `SKILL.md` or any other file.